Skip to content

About

A Fork of SSLStrip2, reverted to before the Spanish Gov't f***up

Resources

Stars

3 stars

Watchers

1 watching

Forks

 
 

Latest commit

 

History

14 Commits

Folders and files

Repository files navigation

SSLStrip+

This is a new version of [Moxie´s SSLstrip] (http://www.thoughtcrime.org/software/sslstrip/) with the new feature to avoid HTTP Strict Transport Security (HSTS) protection mechanism.

This version changes HTTPS to HTTP as the original one plus the hostname at html code to avoid HSTS. Check my slides at BlackHat ASIA 2014 [OFFENSIVE: EXPLOITING DNS SERVERS CHANGES] (http://www.slideshare.net/Fatuo__/offensive-exploiting-dns-servers-changes-blackhat-asia-2014) for more information.

For this to work you also need a DNS server that reverse the changes made by the proxy, you can find it at https://github.com/LeonardoNve/dns2proxy.

Demo video at: http://www.youtube.com/watch?v=uGBjxfizy48

About

A Fork of SSLStrip2, reverted to before the Spanish Gov't f***up

Resources

Stars

3 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors

Languages